{ config, ... }:
{
  services.mollysocket.enable = true;
  services.mollysocket.settings = {
    port = 4337;
    allowed_endpoints = [ "https://ntfy.odin.t5.st/" ];
    allowed_uuids = [ "fa14700c-a870-4f6d-8cfc-3be1466903c6" ];
  };
  services.mollysocket.logLevel = "debug";
  services.mollysocket.environmentFile = config.age.secrets."odin/services/mollysocket".path;

  services.caddy.virtualHosts.mollysocket = {
    hostName = "mollysocket.odin.t5.st";
    extraConfig = ''
      encode gzip zstd
      reverse_proxy 127.0.0.1:4337
    '';
  };

  services.ntfy-sh.enable = true;
  services.ntfy-sh.settings.base-url = "https://ntfy.odin.t5.st";
  services.ntfy-sh.settings.listen-http = "127.0.0.1:5267";

  services.caddy.virtualHosts.ntfy = {
    hostName = "ntfy.odin.t5.st";
    extraConfig = ''
      encode gzip zstd
      reverse_proxy 127.0.0.1:5267
    '';
  };
}